diff options
| author | Jean-Yves Lefort <jylefort@FreeBSD.org> | 2005-09-02 12:59:55 +0000 |
|---|---|---|
| committer | Jean-Yves Lefort <jylefort@FreeBSD.org> | 2005-09-02 12:59:55 +0000 |
| commit | 83951565f6e59483993774b012e1f06b98900d57 (patch) | |
| tree | 1a57ba5db3be42f0ddaea92e431dbc21fdd2fc73 /security | |
| parent | - One more patch to fix things from my last commit (diff) | |
Document stack overflow vulnerabilities in games/urban.
Approved by: simon
Notes
Notes:
svn path=/head/; revision=141788
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 59fe06e880f1..a89fb32d17a9 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,28 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="08df5d46-1baf-11da-8038-0040f42d58c6"> + <topic>urban -- stack overflow vulnerabilities</topic> + <affects> + <package> + <name>urban</name> + <range><lt>1.5.3_2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Several filename-related stack overflow bugs allow a local + attacker to elevate its privileges to the games group, since + urban is installed setgid games.</p> + <p>Issue discovered and fixed by <shaun@rsc.cx>.</p> + </body> + </description> + <dates> + <discovery>2005-09-02</discovery> + <entry>2005-09-02</entry> + </dates> + </vuln> + <vuln vid="6e27f3b6-189b-11da-b6be-0090274e8dbb"> <topic>fswiki - command injection vulnerability</topic> <affects> |